Novell SENTINEL 6.1 SP2, User Manual, Page: 462 / 528

462 Sentinel 6.1 User Guide
no
vd
ocx
(e
n)
7 Ja
nua
ry 201
0

Role: Users can be assigned to one or more Roles for example, Analyst, Admin and so on.
Manual steps in the workflow processes can be assigned to a Role.
Sentinel 6 workflows have four major components that are unique to iTRAC:

Step: A Step is an individual unit of work within a workflow; there are manual steps, decision
steps, command steps, mail steps, and activity-based steps. Each step displays as an icon within
a given workflow template.

Transition: A Transition defines how the workflow will move from one state (Activity) to
another and can be determined by an analyst action, by the value of a variable or by the amount
of time elapsed.

Templates: A Template is a design for a workflow that controls the execution of a process in
Sentinel iTRAC. The template consists of a network of manual and automated steps, activities
and criteria for transition between them. Workflow templates define how to respond to an
incident when a process based on that template is instantiated. A template can be associated
with many incidents.
 Processes: A process is a specific instance of a workflow template that is actively being
tracked by the workflow system. It includes all the relevant information relating to the instance,
including the current step in the workflow, the associated incident, and the results of the steps,
attachments and notes. Each workflow process is associated with one and only one incident.
Figure A-15
iTRAC Workflow
Reporting Service
The Reporting service allows for reporting, including historical and vulnerability reports. Sentinel
comes with out-of-the-box reports and enables users to configure their own reports using Crystal
Reports. Some examples of reports included with Sentinel are:
 Trend analysis

Security status of lines of business or critical assets

Attack types

Targeted assets
 Response times and resolution

Policy compliance violations